Identity Access Mnagement is not working in Azure rest all is working as per CIS help needed immediately

[securityftw]

Identity Access Mnagement is not working in Azure rest all is working as per CIS help needed immediately

[shivankar-madaan]

Hi
I didn't quite get issue, could you please elaborate further on it.

[challs1]

@shivankar-madaan when I am able to run sudo python cs.py -env azure it was running from 2.1 to 8 but not from 1.0 which 1.0 is IAM it was not running IAM rules and rest of them are working as expected

[shivankar-madaan]

Oh.. Got it!!

We haven't implemented the Azure IAM rules, since most of checks are done manually
You can verify that from the official CIS benchmark PDF from AZURE

https://azure.microsoft.com/mediahandler/files/resourcefiles/cis-microsoft-azure-foundations-security-benchmark/CIS_Microsoft_Azure_Foundations_Benchmark_v1.0.0.pdf

If you come across any document, which can help us implement it via code/automation, please let us know.

Thanks

[challs1]

@shivankar-madaan : Oh okay will let u know if i have done anything and also when coming to SQL servers from 4.1.1 to4.1.8 was also not working let me know about these too? whether u guys are not implemented for SQL severs too and SQL databases was working as expected ???

[shivankar-madaan]

Yes you are right
SQL servers are not yet part of the Azure audit.
SQL databases has been implemented.
Do let us know, if you face any issues or false positives

[challs1]

@shivankar-madaan Perfect Thanks for your time and help we can close the issue.

[shivankar-madaan]

@challs1 happy to help!!